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2004 Toyota 4-Runner 


by Brook Francisco & Michael Hyde of 
National Auto Lock Service, Inc. 


1. The 2004 4-Runner is Toyota’s best-selling SUV. The 2004 model has grown in 
size, price, and the amount of options that it can be purchased with; including 
either a V6 or V8 engine. The 4-Runner uses a standard transponder key on all 
models. The key blank is available from the dealer only (Toyota Part #89785-60160). 
Although this car uses the X217/TR-47 keyway with the new 10-cut 50,000-69,000 
code series, the immobilizer chip in the key has been changed, so an aftermarket TR- 
47 PHT will NOT work for this vehicle, only the dealer key will work for this car. 
This model uses a separate immobilizer ECU that can be re-flashed or 
replaced if all keys are lost, but for this article we will be resetting the ECU to 
accept new keys through the OBD-2 port using the new T-Code Toyota/Lexus 
program. Keys and remotes can also be added with the T-Code. 


2. Opening the 2004 Toyota 
4-Runner is not difficult. I use the 
air wedge and long-reach tool, 
which has become standard 
opening procedure for me on 
most late model Toyota and 
Lexus products. I like to insert a 
piece of thin cardboard between 
the vehicles frame and door 
weather stripping on the 
passenger side door. This will 
help prevent possible scratching. 


Opening the Vehicle 
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Manufacturers: Interested in 
offering rebates or discounts to 
NLAA members? Contact Marc 
Goldberg at the Home Office 


4. Now insert and inflate the air wedge. 


3. Next insert 
a plastic wedge. 
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5. You can now insert the long-reach rod. 


6. Maneuver the tip of the long-reach rod towards 
the manual lock/unlock button and pull toward the 
rear of the car. The door will now be unlocked. 


Door Lock Removal 


7. Once the vehicle is unlocked, the driver’s side 
door lock is easily removed. There is a key code 
stamped on this lock, so this is the easiest way 
to generate keys for this vehicle. 
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8. On the edge of the driver’s door even with 
lock, you will see a black rubber grommet. 


9. Remove this grommet to reveal 
a Torx 27 screw. 


10. After loosening this screw, 
the cylinder can be removed. 
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11. The door lock cylinder removed. 


12. The key code is seen easily as 66677. 


13. To disassemble the door lock, begin 
by removing the outer plastic trim piece 
and gently prying off the face cap with 
a small flat-blade screwdriver. The face 
cap will be re-used. 
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14. Next, remove the spring and “C” clip 
at the rear of the cylinder. 


15. The cylinder can now be removed 
through the front of the housing. A 
working key is NOT needed to disassemble 
this lock. 


This lock contains tumblers in positions 
2-10. Remember that Toyota wafers are 
stamped OPPOSITE of their actual cut. 


16. The wafers I pulled from the lock were 
stamped: 32231243. To do the fill in 
InstaCode, I entered ??23324312 
(?=Unknown Cut). InstaCode’s Cutting Tree 
revealed 9 different possibilities that could 
exist, but only two keys total would be 
needed for the full progression. A.S.P. part 
number for this pinning kit is A-30-113. 
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17. The door lock and all components. 


19. The trunk lock on the 2004 4-Runner is easy to 
remove, although there is no code stamped on this 
lock. The lock contains the same tumbler positions 
as the door (2-10) so if you are generating a key 
from this lock you will need to follow the 
progression above. 


Notice the electronic tailgate latch. There are 
no mechanical parts to this latch. 


Trunk Lock Removal and Disassembly 


18. The trunk lock is located in the plastic trim 
of the rear tailgate. 
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20. To remove the tailgate lock cylinder, 
begin by removing the 10mm bolt that 
secures the pull-strap. You can now 
remove the panel by popping out the 
plastic panel clips. 


21. Next, pull back the thin 
plastic internal cover. 


22. You can now see the tailgate lock 
cylinder. Notice there is no linkage for this 
lock, the latch is controlled electronically. 
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23. Next remove the tailpiece switch off 
the back of the lock and then remove the 
two 10mm bolts. 


24. The tailgate lock removed. 


25. Remove the “C” clip on the 
back of the lock. 
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26. Next, gently pry off the face-cap. 
The face-cap will be re-used. 


27. The plug will now come out the 
front of the lock. 


28. The tailgate lock and all components. 
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Glove-Box Lock Removal and Disassembly 


29. The glove-box lock is easily removed and 
disassembled. There are only 4 tumbler positions 
found in this lock, so it is pretty useless for 
any kind of progression. 


Free HPC T-shirt with purchase of any HPC Car Opening Kit 
Rebate code: 04HNS07 


AKK-55 Starter Killer Kit 
AKK-66 Pro Killer Kit 
AKK-77 Deluxe Killer Kit 
AKK-88 Classic Killer Kit 
AKK-99 Ultimate Killer Kit 
AKK-JPTC Jam-Packed Thru Car Killer Kit 
AKK-TC Thru Car Killer Kit 


To receive your HPC, Inc. rebate, simply fill out the form below and mail it along with a copy of your invoice to: 


HPC, Inc. 
Attn: Rebate Department 
PO Box 2093 
Schiller Park, IL 60176 USA 


Include the following details: Company; Name; Title; Address; City; State and Zip; Country; E-mail; Phone; Fax; Product Name; Rebate code. 


Official Rules: 
• Offer valid only for Security Professionals making qualified purchases through an authorized HPC Distributor 
between July 1, 2004 and July 30, 2004. 
• This offer is mutually exclusive and cannot be used with any other offer. 
• To receive free merchandise you must purchase the exact product shown. 
• Paperwork must be clearly state, “Rebate Department”. 
• To qualify, all paperwork (copy of your invoice and a copy of your NLAA card) must be received at HPC, Inc. on or 
before August 31, 2004 by mail or fax. 
• Please allow 4 to 6 weeks for processing. 


30. There are two Phillips screws that hold in 
the glove-box lock. Remove the screws and the 
lock will come out. 


12 • Automotive Edge 
National Locksmith Automobile Association 


31. To disassemble the lock, carefully pry 
the two plastic halves apart. 


32. Next remove the “C” clip on the back 
of the cylinder. 


33. The plug will now come out the front 
of the lock assembly. 
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34. The glove-box lock and all parts. The top 
tumbler pictured is the valet cut. 


36. Begin by removing the circular plastic trim 
bezel around the lock. 


Ignition Lock Removal and Disassembly 


35. The ignition lock on this 2004 4-Runner uses 
an Active Retainer that is common on most 
Toyotas. Removal is not difficult if you have a 
working key to turn the lock to “Accessory”. 
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37. You will now need to drop the lower kick-panel 
housing to gain access to the active retainer. 
Remove the two 10mm bolts on either side of the 
lower kick-panel housing. 


38. You can now drop the lower kick panel. 


39. Now gently remove the antenna ring and 
illumination ring and turn the ignition to “ACC”. 
You can now use a 90-degree pick to depress 
the retainer and remove the ignition. 
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40. The ignition lock found on the 2004 
Toyota 4-Runner is similar to many others 
found on today’s Toyota and Lexus 
vehicles. The most significant design 
development with this new generation of 
ignition lock has been the introduction of 
the improved hardened face cap that is 
secured by three solid roll-pins. With one 
trick, disassembly is pretty simple. 


41. The first step is to remove the three 
solid roll-pins that secure the hardened 
face cap to the lock housing. 


42. Two of the roll pins are fairly easy to 
remove. Insert a sharpened drift punch 
between the lock housing and the back of 
the roll-pin at an approximate angle of 55 
degrees. The idea is to get the punch to 
make contact with BACK of the roll-pin 
and push it forward. 
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43. Hit the punch sharply 
with a hammer. The 
punch should push the 
roll pin slightly forward. 
Note the position of the 
roll-pin as it has been 
pushed forward. 


44. Next, insert a hook 
pick behind the roll-pin 
and push it out further. 
You don’t need to 
remove the pins 
completely, just push 
them out enough so they 
have clearance over the 
lock body housing when 
the face cap is removed. 
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45. The third roll-pin, 
located at the 6 o’clock 
position is a little more 
difficult to remove 
because there is no easy 
way to push it out from 
the back. 


46. After securing the lock 
horizontally in a vise, use 
a drift punch and a 
hammer to PUSH this pin 
DOWNWARD into the 
softer metal of the lock 
housing. You will be able 
to feel the pin “sink” into 
the housing. 
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47. Don’t go crazy, you 
just need to push it down 
far enough to allow 
clearance for the face cap 
to come off. 


48. After this third pin is 
pushed down the face cap 
will easily come off the 
front of the lock. Use a pair 
of long nose pliers to 
remove the remaining pin. 
It will come out easily. 
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49. Use snap-ring pliers 
to remove the circle-clip 
at the rear of the cylinder. 


50. The lock cylinder will 
now come out the front of 
the lock. The ignition lock 
is disassembled. 
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51. All 10 wafers are found in the ignition. 


VEHICLE SELECTION 


MITSUBISHI 


NISSAN 


SUZUKI 


LEXUS/TOYOTA 


V.W./AUDI GROUP 


Programming New Keys with the T-Code 


The following dealer is required, part # 89785-60160. This is a Type 2 Immobilizer system for the T-Code. Type 2 
factory keys have a small dot stamped on the blade. 
NO after-market keys like JET or ILCO will work for this model type. Only factory originals will work from the Toyota dealer. 
Select Lexus/Toyota from the T-Code menu. 


DIAGNOSTIC MENU 


RESET IMMOBILISER 


PROGRAM KEY 


ERASE KEYS 


Using the T-Code you can 
reset the Immobilizer 
system if all keys are lost or 
if you only have a valet key. 


